4 matches found
CVE-2021-24984
The WPFront User Role Editor WordPress plugin before 3.2.1.11184 does not sanitise and escape the changes-saved parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting...
CVE-2021-24984
The WPFront User Role Editor WordPress plugin before 3.2.1.11184 does not sanitise and escape the changes-saved parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting...
PT-2021-16393
Name of the Vulnerable Software and Affected Versions: WPFront User Role Editor WordPress plugin versions prior to 3.2.1.11184 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the changes-saved parameter is not properly sanitised and escaped before...
CVE-2021-24984: Improper Neutralization of Input During Web Page Generation
The WPFront User Role Editor WordPress plugin before 3.2.1.11184 does not sanitise and escape the changes-saved parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting...